arrow
返回

USAGE : Uncertain flow graph and spatio-temporal graph convolutional network-based saturation attack detection method

delete2023-10-01
delete2
PRE
AI
K
Kaixi Wang
崔允贺 (Cui, Yunhe) *
Q
Qing Qian
Y
Yi Chen
C
Chun Guo
G
Guowei Shen
DOI:10.1016/j.jnca.2023.103722delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
With the development of Software-Defined Networking (SDN), its security problems have attached interests from academia. The saturation attack targeted at the SDN switch is one of the most destructive problems in SDN. The saturation attack can destroy SDN networks by depleting the computation and storage resources of SDN switches. Currently, graph neural networks have already been used for detecting saturation attacks in SDN. When constructing the graph based on K-Nearest Neighbors (KNN) algorithm, the number of edges in the graph is fixed. That may fail on accurately representing the relationship among different nodes. In addition, when using the Graph Convolutional Network (GCN) to detect saturation attack against SDN, only a partial graph structure and node features will be learned, causing the flow graph nodes information cannot be fully utilized. To overcome these issues, in this work, we propose USAGE, an uncertain flow graph and spatiotemporal graph neural network-based saturation attack detection method. More specifically, USAGE designs the CRAM algorithm and EGG model. The CRAM algorithm is proposed to generate an uncertain flow graph for each network traffic flow, which can represent the uncertain relationship among different nodes. EGG is a spatio-temporal graph convolutional network model, which is proposed to detect saturation attacks. The evaluation results demonstrate that USAGE can generate a better graph than KNN and achieve high detection performance. Meanwhile, USAGE outperforms other methods in terms of TPR, TNR, accuracy, precision, recall, F-score, confusion matrix, ROC curves, and PR curves.
Keyword:
SDN
Saturation attack
Graph neural network

期刊

Journal of Network and Computer Applications 封面图
Journal of Network and Computer Applications
IF:
8
论文数:
3.6K
被引数:
1.1W

机构

G
guizhou university
学者数:
2.5W
论文数: 1.3W
被引数: 15
引用论文

引用论文

err分享
err收藏
Towards DDoS detection mechanisms in Software-Defined Networking软件定义网络中的DDoS检测机制
err2021-09-01
err46
PREAI
errCui, Yunhe; Qian, Qing; Guo, Chun; Shen, Guowei; Tian, Youliang; Xing, Huanlai; Yan, Lianshan
err分享
err收藏
学者 查看更多内容